User manual BARRACUDA WEB APPLICATION FIREWALL ADMINISTRATOR GUIDE VERSION 7.4

[. . . ] Barracuda Web Application Firewall Administrator's Guide Version 7. 4 Barracuda Networks Inc. Campbell, CA 95008 http://www. barracuda. com Copyright Notice Copyright 2009, Barracuda Networks www. barracuda. com 100615-74v0022-01-0615 All rights reserved. Information in this document is subject to change without notice. Trademarks Barracuda Web Application Firewall is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders. ii Barracuda Web Application Firewall Administrator's Guide Contents C h a p t e r 1 ­ I n t r o d u c t i o n . [. . . ] · Server IP - Enter the IP address of a server used for authenticating users. · Server Port - Enter the port address of the RADIUS server used for authenticating users. · Shared Secret - Enter the secret key which is shared between the Barracuda Web Application Firewall and RADIUS server. · Timeout - Enter the wait timeout in seconds before deciding and re-sending the packet. · Retries - Enter the number of retrials to send packet before giving up. 3. Click Delete against the created RADIUS service to delete the redundant service. SiteMinder SiteMinder Authentication service identifies a database server supporting the SiteMinder protocol, which contains a set of users, groups and mapping between groups and users. This container allows the user to configure the Barracuda Web Application Firewall to communicate to an existing SiteMinder directory server for authenticating a user. To configure an SiteMinder Authentication Service 1. 2. In the New Authentication Service section, click the SITEMINDER tab. Specify values for the following fields: · Realm Name - Specify the name of the realm. It specifies information, in a flat directory structure, such as where users are located and where groups are located. · Server IP - Specify the IP address of the SiteMinder Policy Server used for authenticating users. · Port - Specify the authentication port of the SiteMinder Policy Server used for authenticating users. · Username - Specify the privileged username for the Siteminder Policy Server. User Access Control 121 · Password - Specify the privileged user's password for the Siteminder Policy Server. · Agent Name - Specify the agent name configured in the SiteMinder Policy Server to represent Barracuda Web Application Firewall as SiteMinder agent. Note: The specified agent name must have the following parameters set to 'Yes' under Agent Conf Objects on the SiteMinder Policy Server: AcceptTPCookie RequireCookies · Host Conf Object - Specify the corresponding Host Configuration Object defined on the SiteMinder Policy Server. 3. Click Edit against the created SiteMinder service to modify the settings. Click Delete against the created SiteMinder service to delete the redundant service. RSA SECURID RSA SecurID authentication service identifies the RSA Authentication Manager database, and authenticates the identity of users based on two factors: the current code generated on the user's assigned RSA SecurID authenticator and a secret, memorized Personal Identification Number (PIN) before granting access to the protected resources. This container allows the user to configure the Barracuda Web Application Firewall to communicate to an existing RSA RADIUS server for authenticating a user. To configure a RSA SECURID Authentication Service 1. 2. In the New Authentication Service section, click the RSA SECURID tab. Specify values for the following fields: · Realm Name - Specify the name of the realm. It specifies information, in a flat directory structure, such as where users are located and where groups are located. · Server IP - Specify the IP address of the RSA RADIUS server used for authenticating users. [. . . ] "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). 248 Barracuda Web Application Firewall Administrator's Guide "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. [. . . ]